configuring ASA5505

[saidfrh]

How to best secure an inside network? ASA5505's outside interface has a static public IP. The following is the physical topology.

DSLmodem/router <> ASA5505 <> Linksys wireless router <> wireless users.

The DSL modem will be in bridge mode. The Linksys will provide DHCP to the internal users.

1. Is it best to assign a public IP to ASA's inside interface?

2. Linksys wireless would be connected to a switch port of the ASA and the remaining switch ports will be disabled.

3. PAT would be done on the Linksys.

Thanks.

[roshan.maskey]

Hi,

Normally Cisco recommends router at Publicly connected network for typically SMB-Large organization. But, connected public ip to ASA interface is not bad either.

You can have DHCP done y Linksys wireless device. But, I strongly recommend doing NAT at ASA5505. Cisco ASA is good for NAT.

If you want to have further strict policies for http, ftp, esmtp traffic, you can create application policy map and use them, use regex to block websites or web messengers.